Skip to content
SPECIFICTION
Get listed

BlackNoise BAS

blacknoise.co

WebSelf-hosted
Visit blacknoise.co
Spec score 7.2 #13 of 20 in Breach and Attack Simulation Software

What it is

BlackNoise BAS is a web, self-hosted breach and attack simulation platform for validating cyber defenses and operational readiness. It continuously runs scenarios covering APTs, ransomware, insider threats, data breaches, and state-sponsored attacks across networks, Windows, Linux, macOS, AWS, Microsoft Azure, and Google Cloud. Scenarios can be customized, mapped to MITRE ATT&CK, scheduled continuously, and run automatically or step by step. Users set scope and execution parameters. Strategic and tactical dashboards show cybersecurity performance scores and KPIs such as mean time to detect and respond. The threat library uses indicators of compromise, tactics, techniques, procedures, and timestamps, and provides environment-tailored Sigma, Yara, and Suricata rules. Each executed event has detailed web-application logs, while simulation timelines can be exported. BlackNoise describes the platform as agentless, zero-trust compatible, and governed by a full log policy. Deployment options include SaaS, a dedicated environment, or on-premise. The maker says simulations can support PCI DSS control validation and audit evidence. Pricing is on request, and the product page offers a demo request.

Spec sheet

Purpose
BlackNoise BAS continuously simulates attacks to validate cyber defenses and operational readiness.Read 3 Oct 2026 · blacknoise.co
Intended users
The maker identifies technical analysts, SOC/CERT managers, and CISO/risk managers as audiences for its platform.Read 3 Oct 2026 · blacknoise.co
Deployment
The platform is offered as SaaS, with a dedicated environment available, or on-premise.Read 3 Oct 2026 · blacknoise.co
Headquarters
Paris, FranceRead 28 Sep 2026 · blacknoise.co
Founded
2012Read 28 Sep 2026 · blacknoise.co
Company
BlackNoise is owned by Erium Group, which the company says was founded in 2012 in France; its listed address is 13 rue du Quatre-Septembre, 75002 Paris, France.Read 3 Oct 2026 · blacknoise.co
Agentless
The maker describes the platform as agentless, with no integration effort or persistence on the information system and no side effects.Read 3 Oct 2026 · blacknoise.co
Compliance use
BlackNoise publishes material describing how attack simulations can validate PCI DSS security controls and produce audit evidence.Read 3 Oct 2026 · blacknoise.co
Dashboards
Strategic and tactical dashboards show cybersecurity performance scores and KPIs including mean time to detect and respond (MTTD/R).Read 3 Oct 2026 · blacknoise.co
Detection rules
The product provides contextualized Sigma, Yara, and Suricata rules tailored to the user's environment.Read 3 Oct 2026 · blacknoise.co
Logs
Each executed event has detailed logs in the web application, and simulation timelines are exportable.Read 3 Oct 2026 · blacknoise.co
Scenarios
Simulations cover threats including APTs, ransomware, insider threats, data breaches, and state-sponsored attacks.Read 3 Oct 2026 · blacknoise.co
Security posture
The maker says the technology is zero-trust compatible and applies a full log policy.Read 3 Oct 2026 · blacknoise.co
Support and access
The product page offers a demo request; the site links to technical documentation, but the documentation page could not be opened.Read 3 Oct 2026 · blacknoise.co
Support and sales
The product page invites visitors to request a demo; it does not state public pricing or trial terms.Read 3 Oct 2026 · blacknoise.co
Threat library
The threat library uses real indicators of compromise, TTPs, and timestamps, and provides contextualized Sigma, Yara, and Suricata rules.Read 3 Oct 2026 · blacknoise.co
User controls
Users can set simulation scope, execution parameters, scheduling, and automatic or step-by-step execution mode.Read 3 Oct 2026 · blacknoise.co

Strong points and limits

Strong points

  • Covers network, endpoint, and major cloud environments
  • Supports custom scenarios and MITRE ATT&CK mapping
  • Provides Sigma, Yara, and Suricata rules
  • Offers continuous scheduling and execution controls
  • Exports simulation timelines and logs events

Limits

  • Pricing is available only on request
  • The platform is offered as SaaS or on-premise
  • Agentless operation provides no persistent information-system integration

Who it suits

It is aimed at technical analysts, SOC/CERT managers, and CISO or risk managers. It fits organizations wanting recurring, agentless simulations across on-premise and cloud environments.

Verdict

BlackNoise BAS provides recurring attack simulations, environment-specific detection rules, dashboards, and exportable evidence. Its deployment choices and agentless design should be matched to your operational model.

Where Specifiction places it

Alternatives to BlackNoise BASAll alternatives →